Table 1-1 lists the minimum server system requirements for installing Operations Manager 9.0. If you plan to run Service Monitor or any other IP Communications Management software on the same server as
Prime UOM
or in a virtualization environment, see Coresidence Guidelines for more information.

For optimum viewing on the Prime UOM display, we recommend that you use the highest native resolution supported by the client PC and monitor.

A large, high-resolution display will also allow for less scrolling through information presented and increase operator efficiency. The minimum resolution recommended is 1440 x 900.)

CD-ROM drive.

Support for one or two 1-GB NICs (one is required, and the second is for failover support; both NIC cards must have the same IP address). Prime UOM supports NIC teaming in Fault Tolerance mode alone. NIC teaming for load balancing is not supported.

(Optional) NTP—If you plan to use Service Monitor, configure the server to use Network Time Protocol (NTP) to synchronize with the time server that is used by Cisco Unified Communications Managers in your network. See NTP Configuration Notes.

1.If server RAM size is less than 4 GB, then a warning message appears. For details on enabling the full 4 GB of RAM on Windows, see Enabling the Full 4 GB of RAM.

2.While configuring the page file, you should set both the minimum and maximum file parameters to same size. Page size also needs to be changed from automatic to manual. This ensures that Windows creates a page file of the required size. See Increasing the Paging File Size. For 45,000 phones, the minimum page file size should be 12 GB.

3.Disc Space:

– The OS space requirement is exclusive of the specified value.

– The disc space must be 100 GB(exclusive of the HDD space), for 60,000 phones.

– Do not install Prime UOM on a FAT file system.

4.You must install Prime UOM on a dedicated system. Do not install Prime UOM on a Primary Domain Controller (PDC) or Backup Domain Controller (BDC). Do not install Prime UOM in an encrypted directory. Prime UOM does not support directory encryption.

5.The Operations Manager system can be part of a Windows server domain.

6.Immediately after installation, the TCP/IP stack should be hardened to avoid denial of service attacks. Ensure these steps are taken before using the product.

– Apply Windows security patches. See Microsoft Security Updates for Denial of Service Attacks for details. The system that you use for your Prime UOM server should meet all security guidelines that Microsoft recommends for Windows 2003 or 2008 Server. (CSCsy83124) See the NSA website for security guidance: http://www.nsa.gov
.

Specifically, the TCP/IP stack should be hardened to avoid denial of service attacks. Refer to the section "Security Consideration for Network Attacks" on page 121 of the The Windows Server 2003 - Security Guide, v2.1 which can be downloaded from the NSA website.

– On the Windows Server 2003 Enterprise Edition or 2008 Standard or Enterprise Edition server, block remote access to all TCP/UDP ports except for those ports used by Prime UOM required for external access. See Firewall Updates to Avoid Denial of Service Attacks.

7.The default locale for your Windows operating system must be set to US-English.

8.Windows Terminal Services is supported in Remote Administration mode only. Use of Windows Terminal Services or Remote Desktop and Virtual Network Computing (VNC) to remotely control the server is not recommended for performing day-to-day operations (for example, running reports, keeping dashboards open, and so on). For more information, see Terminal Server Support for Windows 2003 and 2008.

Installing Prime UOM will install Service Monitor also. The Service Monitor is installed with Prime UOM but it is not configured. So it does not consume any resources. Do not install Service Monitor again.

Note IPV6, DHCP Client, and Firewall should be disabled before installing Prime UOM.

(Optional) NTP—If you plan to use Service Monitor, configure the server to use Network Time Protocol (NTP) to synchronize with the time server that is used by Cisco Unified Communications Managers in your network. See NTP Configuration Notes.

(Optional) NTP—If you plan to use Service Monitor, configure the server to use Network Time Protocol (NTP) to synchronize with the time server that is used by Cisco Unified Communications Managers in your network. See NTP Configuration Notes.

1.When configuring the page file, you should set both the minimum and maximum file size parameters equal to the page file size mentioned above.

2.Disk Space:

– The OS space requirement is exclusive of the specified value.

– The disc space must be 100 GB(exclusive of the HDD space), for 60,000 phones.

– Do not install Prime UOM on a FAT file system.

3.Do not install Prime UOM on a Primary Domain Controller (PDC) or Backup Domain Controller (BDC). Do not install Prime UOM in an encrypted directory. Prime UOM does not support directory encryption.

4.The Operations Manager system can be part of a Windows server domain.

5.The system that you use for your Prime UOM server should meet all the security guidelines that Microsoft recommends for Windows 2003 or 2008 Server. See the NSA website for security guidance: http://www.nsa.gov/.

Specifically, the TCP/IP stack should be hardened to avoid denial of service attacks. Refer to the section "Security Consideration for Network Attacks" on page 121 of the The Windows Server 2003 - Security Guide, v2.1 which can be downloaded from the NSA website.

6.The default locale for your Windows operating system must be set to US-English.

7.Windows Terminal Services is supported in Remote Administration mode only. Use of Windows Terminal Services or Remote Desktop and Virtual Network Computing (VNC) to remotely control the server is not recommended for performing day-to-day operations (for example, running reports, keeping dashboards open, and so on). For more information, see Terminal Server Support for Windows 2003 and 2008.

Note • Install each application along with its databases on a separate drive. You can install one of the applications on the system drive (C:). However, if you have a sufficient number of drives, we recommend that none of the applications be installed on the system drive.

(Optional) NTP—If you plan to use Service Monitor, configure the server to use Network Time Protocol (NTP) to synchronize with the time server that is used by Cisco Unified Communications Managers in your network. See NTP Configuration Notes.

1.When configuring the page file, you should set both the minimum and maximum file size parameters equal to the page file size set above

2.Disk Space:

– The OS space requirement is exclusive of the specified value.

– The disc space must be 100 GB(exclusive of the HDD space), for 60,000 phones.

– Do not install Prime UOM on a FAT file system.

3.Do not install Prime UOM on a Primary Domain Controller (PDC) or Backup Domain Controller (BDC). Do not install Prime UOM in an encrypted directory. Prime UOMdoes not support directory encryption.

4.The Operations Manager system can be part of a Windows server domain.

5.The system that you use for your Prime UOM server should meet all the security guidelines that Microsoft recommends for Windows 2003 or 2008 Server. See the NSA website for security guidance: http://www.nsa.gov/.

Specifically, the TCP/IP stack should be hardened to avoid denial of service attacks. Refer to the section "Security Consideration for Network Attacks" on page 121 of the The Windows Server 2003 - Security Guide, v2.1 which can be downloaded from the NSA website.

6.The default locale for your Windows operating system must be set to US-English.

7.Windows Terminal Services is supported in Remote Administration mode only. Use of Windows Terminal Services or Remote Desktop and Virtual Network Computing (VNC) to remotely control the server is not recommended for performing day-to-day operations (for example, running reports, keeping dashboards open, and so on). For more information, see Terminal Server Support for Windows 2003 and 2008.

VMware Guidelines

Prime UOM supports VMware ESX 3.5, ESXi 4.x, and ESXi 5.0. Prime UOM must have the same system resources available to it, inside the virtualization environment that it has for a standard (nonvirtual) installation.

While determining the performance of Prime UOM in your virtual setup, you should be aware that the VMware instance will use some system resources that would normally be available to Prime UOM in a standard installation. Additional requirements for running Prime UOM in a virtualization environment might vary with your environment and system load.

Prime UOM can be installed on a virtual machine with dynamic MAC address for evaluation. However, you must configure the virtual machine with a static MAC address to purchase the permanent license for Prime UOM.

The static MAC address is required because licensing uses node-locking technology. The license file can only be used with the static MAC address that you supply.

Note The static MAC address must be within the following range: 00:50:56:00:00:00 to 00:50:56:3F:FF:FF.

To set up a static MAC address:

Step 1 Power down the virtual machine.

Step 2 In the Inventory panel, select the virtual machine.

Step 3 Click the Summary tab and then click
Edit Settings
.

Step 4 In the Hardware list, select
Network Adapter
.

Step 5 For MAC address, select
Manual
.

Step 6 Change the current MAC address of the virtual machine to a static MAC address in the following range: 00:50:56:00:00:00 to 00:50:56:3F:FF:FF.

Step 7 Click
OK
.

For more information, see
Best Practices for Cisco Unified Communications Management Suite on Virtualization
at this URL:

Step 7 Restart the server for the firewall settings to take effect, if required.

Terminal Server Support for Windows 2003 and 2008

You can install Prime UOM on a system with Terminal Services enabled in Remote Administration mode. However, you must not install Prime UOM on a system with Terminal Services enabled in Application mode.

If you have enabled Terminal Services in Application mode, you should disable the Terminal Server, reboot the system, and start the installation again.

Table 1-5 summarizes the Terminal Services features on a Windows 2003 or 2008 Server.

.

Table 1-5 Terminal Services on a Windows 2003 or 2008 Server

Windows 2003/2008 Server

Features

Terminal Server

Remote access and virtual system. Each client has its own virtual OS environment.

Remote Desktop Administration

Remote access only. All clients use the same (and the only) operating system.

Do not use terminal services to perform day-to-day tasks in Cisco Prime Unified Management Communications Suite applications, such as viewing the real-time Fault Monitor in Prime UOM or viewing reports in Service Monitor.

Enabling and Disabling Terminal Services on a Windows Server

To enable or disable the Terminal Server, go to
Manage Your Server > Add or Remove a Role >
Terminal Server.

To enable or disable remote desktop administration, go to
Control Panel
>
System >
Remote
.

Disabling IPv6

Step 1 Type regedit in the Start Search box, and then click regedit.exe in the Programs list.

Step 2 In the User Account Control dialog box, click Continue.

Step 3 In Registry Editor, locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters \

Step 4 Double-click DisabledComponents to modify the DisabledComponents entry.
If the DisabledComponents entry is unavailable, you must create it. To do this, follow these steps:

a. In the Edit menu, point to New, and then click DWORD (32-bit) Value.

b. Type DisabledComponents, and then press ENTER.

c. Double-click DisabledComponents.

d. Re-start Windows 2008 Server.

Type 0xffffffff to disable all IPv6 components, except the IPv6 loopback interface. This value also configures Windows to prefer using Internet Protocol version 4 (IPv4) over IPv6 by modifying entries in the prefix policy table.

For more information about how to disable IPv6 for your operating system version, see the Microsoft Support website at:

Client Requirements

If a client system is available, it is recommended that you perform all configurations and day-to-day activities on the client system. If a client system is not available, the Prime UOM server must also meet all the system requirements for a client system (see
Table 1-6).

Note Operations Manager uses popup dialog boxes at many places. If you have a popup-blocker enabled in your browser, none of these popups will appear. Therefore, you should disable the popup-blocker if you have installed it.

Note Operations Manager uses popup dialog boxes at many places. If you have a popup-blocker enabled in your browser, none of these popups will appear. Therefore, you should disable the popup-blocker if you have installed it.

Adobe Flash Player 11.x. Downloading Flash from the Adobe website requires that you install ActiveX cookies on the system.

An offline installation of Flash may be required if Internet Explorer security patches are present on a newly installed Prime UOM server.

Memory (RAM)

4 GB minimum.

Page file space

2 GB.

Environment

Clients must be able to access Prime UOM:

From outside a firewall—Refer to documentation for your firewall for how to configure client access.

Across a Virtual Private Network (VPN)—The VPN tunnel should connect the client and a VPN router or similar device.

3.Your browser’s Internet security level must be set to Medium. To check the current level in Internet Explorer, select Tools > Internet Options, and click the Security tab.

Cisco Prime Unified Computing System

Prime UOM can be installed on a Cisco Prime Unified Computing System. If you are going to install Prime UOM on a Cisco Prime Unified Computing System, make sure that the system has the latest firmware installed.

While using Prime UOM on a system with virus protection software, it is recommended that you enable virus protection only after the installation is complete. After the installation is complete, we recommend you to
exclude
the NMSROOT directory, its sub folders and files from virus scanning and on-access scanning.

Problems can arise when Operation Manager files are locked because of virus scanning. Do not schedule active scanning of drives and memory to occur during peak hours. You may experience delays, and performance may be degraded, when the virus scan software is scanning all files.

System Capacity

Table 1-8 lists the maximum capacity of Prime UOM when it is installed on a system that meets the requirements for the deployment (see
Table 1-1).